Static task
static1
Behavioral task
behavioral1
Sample
aac7cdbfa9020c2433ace91b14b280e6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aac7cdbfa9020c2433ace91b14b280e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aac7cdbfa9020c2433ace91b14b280e6_JaffaCakes118
-
Size
171KB
-
MD5
aac7cdbfa9020c2433ace91b14b280e6
-
SHA1
71c7a0f1cd140c27f299db621b6cd4ef567a5788
-
SHA256
535693d985cabf1849a3b241188e2ce66223b1aa8a795803ce9878e48fb2f6af
-
SHA512
958d52ad6824716f45c12b145265f7f00f2b4c372a77534ff417da8ff269232b21e91383c20915963d4d96d9dc2d131823462cabb8f7e2a0aafde32352abe723
-
SSDEEP
3072:UreM1bIqgNZAVNQ9hnejG4sekc63Y2oBUWGLQbGQCfiSZeLXKYkyO9ZG2pPhD0t:j8WZmMhniG4tkBI22UWG0bC34aQahD0t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aac7cdbfa9020c2433ace91b14b280e6_JaffaCakes118
Files
-
aac7cdbfa9020c2433ace91b14b280e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE